Securing devices


The following security is applied when managing devices:

  • For Snapshot span actions, BMC Network Automation always uses the device's assigned device security profile (DSP).
  • For Telnet/SSH client sessions, the user supplies logon credentials as prompted by the device.
  • For all other span actions (for example, Deploy to Active, Deploy OS Image), a system parameter under Admin > System Parameters defines which logon credentials to use. To force the user to supply TACACS+/RADIUS credentials, select Enter at Job Creation.

The following figure shows Device Security Profile being selected for security:

SystemParam_DSP.png

Editing user authentication parameters

You can edit user authentication system parameters, which are configurable by navigating to Admin > System Admin > System Parameters. For details, see Security section (local mode user authentication) and Security section (external mode user authentication).

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

BMC Network Automation 8.9